Vulnerable Web Application (Node.js)
Built an intentionally vulnerable Node.js and Express application for penetration testing practice. Identified SQL Injection, XSS, CSRF, SSRF, Broken Access Control, and Sensitive Data Exposure vulnerabilities. Included Login, Register, Search, Transfer, Fetch, and Profile modules, using SQLite with JSON export for analysis. Documented testing workflows and payloads for professional simulation.
Online Exam Platform
Developed a web-based exam system with admin and student portals. Admins can create and manage quizzes, while students can attempt quizzes and receive instant results. Backend: Node.js and Express; frontend: HTML, CSS, and JavaScript.
Automated Web Application Pentesting Tool
Built a Python-based tool for automated security testing with port scanning, directory brute forcing, and SQL injection detection. Integrated Nmap for scanning and analyzed HTTP responses to detect vulnerabilities.